Credit @yetingli for the regexp improvement

isaacs · Feb 7, 2022 · 47e0e45 · 47e0e45
1 parent 707e1b2
commit 47e0e45
Showing 1 changed file with 2 additions and 0 deletions.
diff --git a/minimatch.js b/minimatch.js
@@ -264,6 +264,8 @@ function braceExpand (pattern, options) {
 
   assertValidPattern(pattern)
 
+  // Thanks to Yeting Li <https://github.com/yetingli> for
+  // improving this regexp to avoid a ReDOS vulnerability.
   if (options.nobrace || !/\{(?:(?!\{).)*\}/.test(pattern)) {
     // shortcut. no need to expand.
     return [pattern]